Trellix
Endpoint Forensics

Benefits

• Prevent cyber-attacks on the endpoint
  
  • Identify attacker behavior and their tactics, techniques, and procedures.
  • Analyze live memory—without downloading memory images—to discover hidden malware.
• Detect malware and other signs of compromise on endpoints across the enterprise
  • Sweep thousands of endpoints for evidence of compromise, including malware and irregular activities.
  • Enable remote investigation securely over any network, without requiring access authorization.
  • Collect targeted forensic data with intelligent filtering to return only the data you need.
• Respond to endpoint security incidents faster
  
  • Automatically collect data and analyze suspicious activity based on alerts generated by your SIEM, ticketing system or other applications.
    
  • Integrate with other detection systems to automate triage of hosts with suspicious activity.
  • Support open IOCs to allow security analysts to edit and share custom IOCs.